Description
Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files.
References
- 13407 vdb-entry
- 15161 third-party-advisory
- 20050427 ZRCSA-200501 - Multiple vulnerabilities in Claroline mailing-list
- http://www.claroline.net/news.php#85
- claroline-document-directory-traversal(20287) vdb-entry
- 1013822 vdb-entry
- 15725 third-party-advisory